$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa File: 3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa (raw, json) Hash identifier: Bf4d79BRvEu0s7tDesbEONNCFjvD6kV0ikhHbrN7b2M= Subject key identifier: 30:15:42:E1:32:94:EC:8E:17:B9:CD:32:DD:EC:91:4E:15:67:5F:E9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584919417D4E48BA02DAC57D7AC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 1225 IP address blocks: 128.241.192.0/21 maxlen: 21 204.2.140.0/22 maxlen: 24 2001:418:3ff::/64 maxlen: 64 2001:418:1439::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7d:4e:48:ba:02:da:c5:7d:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=5df3850c-2d58-4de6-9a60-6354f66ed578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:01:17:81:3b:35:90:1e:63:00:fb:2e:1a: 7f:0b:c5:fa:05:08:0c:79:3d:c5:b5:83:d7:4e:be: 3f:39:d8:9f:92:c8:ba:b8:b4:16:29:1d:34:62:7a: 92:71:d7:3a:81:4e:77:cf:c4:06:b4:ee:5c:2f:54: fe:a0:ed:68:18:14:23:25:0d:c8:14:db:f8:95:a2: 14:90:33:52:1f:35:b7:11:72:c0:6a:1b:4b:9d:7a: 55:a4:d2:63:32:7d:ca:63:8e:9b:d3:16:9a:c4:e8: 6f:60:b7:6c:63:b1:1a:85:4f:1c:2b:3c:85:38:fa: c0:80:b8:b5:35:2e:c7:0e:bc:4b:cd:5f:c6:41:2e: cc:6c:90:59:74:1b:55:07:20:4f:25:10:6c:dd:86: 3b:46:d2:39:58:bd:47:ff:02:94:a7:e8:0d:58:01: 0d:31:e9:63:11:31:43:e6:ab:f4:04:17:80:bf:2a: 96:e2:e3:ef:c3:80:13:16:82:dc:7f:f2:d1:ed:9c: 09:5b:20:d3:7a:d0:45:ed:d7:fc:82:39:27:e3:1a: c3:20:9b:f3:aa:82:13:61:d9:a2:db:97:dd:08:74: cb:65:07:cc:33:57:ed:4b:36:38:f6:fc:10:79:5c: 91:58:a0:88:4b:ee:2e:7e:2c:d3:b3:be:38:a1:b4: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:15:42:E1:32:94:EC:8E:17:B9:CD:32:DD:EC:91:4E:15:67:5F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.192.0/21 204.2.140.0/22 IPv6: 2001:418:3ff::/64 2001:418:1439::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:62:91:8f:8e:7e:ce:2b:a5:af:07:bd:23:e6:81:12:46:ff: 6c:c8:a1:63:84:58:84:5b:d4:92:7e:ab:62:5c:6b:53:ab:0f: c4:0e:b9:06:43:76:f2:97:c6:f2:b4:51:b1:50:16:55:96:29: f9:06:33:3f:2d:6c:b6:d1:5e:e5:22:3e:1f:07:d1:d2:0f:18: 41:f1:1e:8e:de:50:81:69:0b:96:71:8d:00:69:58:76:68:73: 52:7d:e9:1b:86:9c:7b:62:cf:6b:43:d6:00:17:43:3f:9f:ce: 6d:ec:df:1f:a3:c8:7f:a2:fa:da:e7:78:1b:eb:32:d1:98:9c: f8:ac:34:40:63:00:ba:e6:9d:57:b6:cc:ae:ec:25:73:e5:96: 7f:c8:a5:1f:1c:3b:b3:bd:f4:17:ae:c2:b1:c0:e0:d9:16:bb: 20:ae:2c:56:26:89:33:07:d0:fe:87:8c:b2:67:42:72:fa:5c: be:8b:40:da:f0:37:ab:d0:fc:26:73:ba:8f:f2:d3:51:e4:3a: 9e:56:de:07:5c:c1:36:a8:e6:9d:75:2c:ac:e9:d0:da:ad:fb: 17:3a:cc:55:1d:44:ba:83:d8:70:2c:9a:42:4d:94:ab:9b:7d: ea:3a:ee:17:4b:b7:45:58:3c:85:78:d6:e0:e5:02:7c:fd:13: 11:f0:19:3e -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEkZQX1OSLoC2sV9esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NWRmMzg1MGMtMmQ1OC00ZGU2LTlhNjAtNjM1NGY2NmVkNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+sBF4E7NZAeYwD7Lhp/C8X6BQgMeT3FtYPX Tr4/Odifksi6uLQWKR00YnqScdc6gU53z8QGtO5cL1T+oO1oGBQjJQ3IFNv4laIU kDNSHzW3EXLAahtLnXpVpNJjMn3KY46b0xaaxOhvYLdsY7EahU8cKzyFOPrAgLi1 NS7HDrxLzV/GQS7MbJBZdBtVByBPJRBs3YY7RtI5WL1H/wKUp+gNWAENMeljETFD 5qv0BBeAvyqW4uPvw4ATFoLcf/LR7ZwJWyDTetBF7df8gjkn4xrDIJvzqoITYdmi 25fdCHTLZQfMM1ftSzY49vwQeVyRWKCIS+4ufizTs744obR6BwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFDAVQuEylOyOF7nNMt3skU4VZ1/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2Y4MWEwNmEtNzViMy0z YmQzLTliYTItODkyZjM3MDI3MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQDgPHAAwQC zAKMMBoEAgACMBQDCQAgAQQYA/8AAAMHACABBBgUOTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJYpGPjn7O K6WvB70j5oESRv9syKFjhFiEW9SSfqtiXGtTqw/EDrkGQ3byl8bytFGxUBZVlin5 BjM/LWy20V7lIj4fB9HSDxhB8R6O3lCBaQuWcY0AaVh2aHNSfekbhpx7Ys9rQ9YA F0M/n85t7N8fo8h/ovra53gb6zLRmJz4rDRAYwC65p1Xtsyu7CVz5ZZ/yKUfHDuz vfQXrsKxwODZFrsgrixWJokzB9D+h4yyZ0Jy+ly+i0Da8Der0Pwmc7qP8tNR5Dqe Vt4HXME2qOaddSys6dDarfsXOsxVHUS6g9hwLJpCTZSrm33qOu4XS7dFWDyFeNbg 5QJ8/RMR8Bk+ -----END CERTIFICATE-----Generated at Sun Apr 27 06:43:48 2025 by rpki-client